EAP225-Outdoor restore for a Windows user

sorry for delay but I've tried several combination but without success.
I made some errors for sure but I dont know where. I have doubt.

  1. I dont have at this moment a router because not at home so I will connect EAP to the ethernet port of my laptop, could be ok?
  2. I connect EAP and stop boot than I run setenv serverip 192.168.0.109 and setenv ipaddr 192.168.0.199, what IP address do I have to assign to my PC?
  3. I think now I have to load initramfs.bin but what is the correct command to send?
  1. yes direct connection usually works

  2. serverip is the one providing the image - your pc

  3. https://downloads.openwrt.org/snapshots/targets/ath79/generic/

I'm realizing that this is not my job.

  • disabled firewall
  • connected EAP225 to PC directly
  • set fixed IP to my pc at 192.168.0.109
  • stopped bootloader and run setenv serverip 192.168.0.109 and setenv ipaddr 192.168.0.199
  • downloaded ...initramfs.bin files and renamed short and put file in the same directory of putty.exe
  • run tftp initramfs.bin with different address (0x80800000, 0x9f040000,0x80060000 and none)
    Here outpunt
ath> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),14528k(rootfs),1408k(uImage),64k(mib0),64k(ART)
bootcmd=bootelf 0x9f040000
bootdelay=2
baudrate=115200
ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
dir=
lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}board956x${bc}-jffs2&&erase 0x9f050000 +0xE30000&&cp.b $fileaddr 0x9f050000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9fe80000 +$filesize&&cp.b $fileaddr 0x9fe80000 $filesize
stdin=serial
stdout=serial
stderr=serial
serverip=192.168.0.109
ipaddr=192.168.0.199
ethact=eth0

Environment size: 693/65532 bytes
ath> tftp 0x80800000 initramfs.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.199
Filename 'initramfs.bin'.
Load address: 0x0
Loading: T T T
Abort
ath> tftp 0x9f040000 initramfs.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.199
Filename 'initramfs.bin'.
Load address: 0x9f040000
Loading: T
Abort
ath> tftp 0x80060000 initramfs.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.199
Filename 'initramfs.bin'.
Load address: 0x80060000
Loading: T T
Abort
ath> tftp initramfs.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
Using eth0 device
TFTP from server 192.168.0.109; our IP address is 192.168.0.199
Filename 'initramfs.bin'.
Load address: 0x0
Loading: T T
Abort
ath>

i still read Retry count exceeded; starting again

OK, so at least it's trying.

Try putting a switch between the EAP and the PC.

Good evening.
I've succed in loading initramfs.bin in console.
My mistake was that I did not set the folder where TFTP will find file *.bin.
I've upload initramfs.bin via built-in tftp and then run bootelf $fileaddr and run cliclientd stopcs but I receive a cliclientd not found.
Following log.

ath>     tftp 0x80800000 initramfs.bin
Trying eth0
Checking Link: Up
Checking Duplex: Full
athrs_ar8033_phy_speed 172 speed=2 phy_hw_status=bc1c
dup 1 speed 1000
Using eth0 device
TFTP from server 192.168.1.2; our IP address is 192.168.1.1
Filename 'initramfs.bin'.
Load address: 0x80800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###########
done
Bytes transferred = 4714708 (47f0d4 hex)
ath>     bootelf $fileaddr
Loading .text @ 0x80060000 (4710197 bytes)
## Starting application at 0x80060000 ...


OpenWrt kernel loader for AR7XXX/AR9XXX
Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org>
Decompressing kernel... done!
Starting kernel at 80060000...

[    0.000000] Linux version 5.4.121 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16800-efee640716)) #0 Mon May 24 18:30:04 2021
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is TP-Link EAP225-Outdoor v1
[    0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 114248K/131072K available (5247K kernel code, 188K rwdata, 1192K rodata, 8660K init, 205K bss, 16824K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] random: get_random_bytes called from start_kernel+0x358/0x54c with crng_init=0
[    0.000000] CPU clock: 775.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4932285024 ns
[    0.000007] sched_clock: 32 bits at 387MHz, resolution 2ns, wraps every 5541893118ns
[    0.008230] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.074759] pid_max: default: 32768 minimum: 301
[    0.079755] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.087469] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.099638] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.110045] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.117312] pinctrl core: initialized pinctrl subsystem
[    0.125232] NET: Registered protocol family 16
[    0.156842] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.170622] clocksource: Switched to clocksource MIPS
[    0.177026] NET: Registered protocol family 2
[    0.181831] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.190137] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.199022] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.207115] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.214558] TCP: Hash tables configured (established 1024 bind 1024)
[    0.221394] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.228294] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.235984] NET: Registered protocol family 1
[    0.240606] PCI: CLS 0 bytes, default 32
[    0.372172] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.385186] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.391382] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.415019] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.426312] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.433381] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.442187] printk: console [ttyS0] disabled
[    0.446727] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 1562500) is a 16550A
[    0.455868] printk: console [ttyS0] enabled
[    0.455868] printk: console [ttyS0] enabled
[    0.464934] printk: bootconsole [early0] disabled
[    0.464934] printk: bootconsole [early0] disabled
[    0.486389] spi-nor spi0.0: gd25q128 (16384 Kbytes)
[    0.491540] 7 fixed-partitions partitions found on MTD device spi0.0
[    0.498099] Creating 7 MTD partitions on "spi0.0":
[    0.503083] 0x000000000000-0x000000020000 : "u-boot"
[    0.509081] 0x000000020000-0x000000030000 : "partition-table"
[    0.515884] 0x000000030000-0x000000040000 : "info"
[    0.521708] 0x000000040000-0x000000dc0000 : "firmware"
[    0.532088] 2 elf-loader-fw partitions found on MTD device firmware
[    0.538565] Creating 2 MTD partitions on "firmware":
[    0.543748] 0x000000000000-0x000000180000 : "kernel"
[    0.549696] 0x000000180000-0x000000d80000 : "rootfs"
[    0.555683] mtd: device 5 (rootfs) set to be root filesystem
[    0.563362] 1 squashfs-split partitions found on MTD device rootfs
[    0.569758] 0x000000760000-0x000000d80000 : "rootfs_data"
[    0.576235] 0x000000dc0000-0x000000df0000 : "config"
[    0.582284] 0x000000f30000-0x000000ff0000 : "log"
[    0.587944] 0x000000ff0000-0x000001000000 : "art"
[    0.595463] libphy: Fixed MDIO Bus: probed
[    1.591005] libphy: ag71xx_mdio: probed
[    1.612716] ag71xx 19000000.eth: connected to PHY at mdio.0:04 [uid=004dd074, driver=Atheros 8031 ethernet]
[    1.623401] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    1.630085] i2c /dev entries driver
[    1.635700] NET: Registered protocol family 10
[    1.645578] Segment Routing with IPv6
[    1.649469] NET: Registered protocol family 17
[    1.654178] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.667580] 8021q: 802.1Q VLAN Support v1.8
[    1.672723] PCI host bridge /ahb/pcie-controller@18250000 ranges:
[    1.679040]  MEM 0x0000000012000000..0x0000000013ffffff
[    1.684485]   IO 0x0000000000000000..0x0000000000000000
[    1.690036] PCI host bridge to bus 0000:00
[    1.694310] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    1.701421] pci_bus 0000:00: root bus resource [io  0x0000]
[    1.707176] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.714191] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.722410] pci 0000:00:00.0: [168c:0056] type 00 class 0x028000
[    1.728655] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    1.735797] pci 0000:00:00.0: PME# supported from D0 D3hot
[    1.742398] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    1.749248] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    1.757758] hctosys: unable to open rtc device (rtc0)
[    1.811899] Freeing unused kernel memory: 8660K
[    1.816581] This architecture does not have kernel memory protection.
[    1.823246] Run /init as init process
[    2.161349] init: Console is alive
[    2.165081] init: - watchdog -
[    2.185534] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.195099] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.213143] init: - preinit -
[    2.445248] random: jshn: uninitialized urandom read (4 bytes read)
[    2.557188] random: jshn: uninitialized urandom read (4 bytes read)
[    2.589456] random: jshn: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    4.830651] random: fast init done
[    5.861929] eth0: link up (1000Mbps/Full duplex)
[    5.866727] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    6.873540] eth0: link down
[    6.886706] procd: - early -
[    6.889774] procd: - watchdog -
[    7.471333] procd: - watchdog -
[    7.474948] procd: - ubus -
[    7.485514] urandom_read: 5 callbacks suppressed
[    7.485521] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.528573] random: ubusd: uninitialized urandom read (4 bytes read)
[    7.538499] procd: - init -
Please press Enter to activate this console.
[    8.056807] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.104859] Loading modules backported from Linux version v5.10.34-0-g0aa66717f684
[    8.112744] Backport generated by backports.git v5.10.34-1-0-g7b5533e1
[    8.172648] xt_time: kernel timezone is -0000
[    8.297148] PPP generic driver version 2.4.2
[    8.311703] NET: Registered protocol family 24
[    8.327320] urngd: v1.0.2 started.
[    8.430319] ieee80211 phy0: Atheros AR9561 Rev:0 mem=0xb8100000, irq=2
[    8.490995] kmodloader: done loading kernel modules from /etc/modules.d/*
[    8.600916] random: crng init done
[   44.123338] br-lan: port 1(eth0) entered blocking state
[   44.128742] br-lan: port 1(eth0) entered disabled state
[   44.134488] device eth0 entered promiscuous mode
[   47.221918] eth0: link up (1000Mbps/Full duplex)
[   47.226728] br-lan: port 1(eth0) entered blocking state
[   47.232160] br-lan: port 1(eth0) entered forwarding state
[   47.239611] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready



BusyBox v1.33.1 (2021-05-24 18:30:04 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r16800-efee640716
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------

root@OpenWrt:/# cliclientd stopcs
/bin/ash: cliclientd: not found

Any other kindly tought how proceed?
Please note that I cannot access to AEP225 via WIFI also if I can find the SSID

Cliclientd is a hack for the stock firmware. It doesn't apply here.

Having booted initramfs OpenWrt, now scp the sysupgrade distribution bin to /tmp and install it to flash with sysupgrade.

Good morning.
My next step were:

  1. copy sysupgrade.bin in /tmp folder with WINSCP program (windows user)
  2. run sysupgrade -v /tmp/sysupgrade.bin in PUTTY to install
    but now I dont know next step, because after reboot I cant find EAP SSID nor access through web browser.
    Any other though?
    thanks in advance

Watch the boot log on serial as it boots from flash. Any problems should be visible.

If it boots fully you should be able to log in at 192.168.1.1.

A new install of OpenWrt has wifi disabled you must use Ethernet or serial to log in.

I'm not able to log in EAP at 192.168.1.1. Attached log

U-Boot 1.1.4--LSDK-10.2-00082-4 (Jul 19 2017 - 13:54:13)

board956x - Dragonfly 1.0DRAM:
sri
ath_ddr_initial_config(287): (ddr2 init)
ath_ddr_initial_config: DDR_EMR2_ADDRESS=0x180000bc, EMR2 value=0x80
ath_sys_frequency: ref_clk 25000000
ath_sys_frequency: cpu 775 ddr 650 ahb 258
Tap values = (0x10, 0x10, 0x10, 0x10)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 164k for U-Boot at: 87fd4000
Reserving 192k for malloc() at: 87fa4000
Reserving 44 Bytes for Board Info at: 87fa3fd4
Reserving 36 Bytes for Global Data at: 87fa3fb0
Reserving 128k for boot params() at: 87f83fb0
Stack Pointer at: 87f83f98
Now running in RAM - U-Boot at: 87fd4000
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Setting 0x181162c0 to 0x28502100
Hit Ctrl+B to stop autoboot:  0
Loading .text @ 0x80060000 (2182828 bytes)
## Starting application at 0x80060000 ...


OpenWrt kernel loader for AR7XXX/AR9XXX
Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org>
Decompressing kernel... done!
Starting kernel at 80060000...

[    0.000000] Linux version 5.4.121 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16800-efee640716)) #0 Mon May 24 18:30:04 2021
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is TP-Link EAP225-Outdoor v1
[    0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 121672K/131072K available (5247K kernel code, 188K rwdata, 1192K rodata, 1236K init, 205K bss, 9400K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] random: get_random_bytes called from start_kernel+0x358/0x54c with crng_init=0
[    0.000000] CPU clock: 775.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4932285024 ns
[    0.000007] sched_clock: 32 bits at 387MHz, resolution 2ns, wraps every 5541893118ns
[    0.008230] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.074750] pid_max: default: 32768 minimum: 301
[    0.079746] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.087453] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.099622] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.110027] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.117295] pinctrl core: initialized pinctrl subsystem
[    0.125215] NET: Registered protocol family 16
[    0.156946] workqueue: max_active 576 requested for napi_workq is out of range, clamping between 1 and 512
[    0.170754] clocksource: Switched to clocksource MIPS
[    0.177212] NET: Registered protocol family 2
[    0.181966] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.190267] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.199152] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.207250] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.214689] TCP: Hash tables configured (established 1024 bind 1024)
[    0.221524] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.228427] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.236123] NET: Registered protocol family 1
[    0.240780] PCI: CLS 0 bytes, default 32
[    0.248459] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.261521] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.267663] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.290980] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.302107] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.309137] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.317960] printk: console [ttyS0] disabled
[    0.322557] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 9, base_baud = 1562500) is a 16550A
[    0.331667] printk: console [ttyS0] enabled
[    0.331667] printk: console [ttyS0] enabled
[    0.340719] printk: bootconsole [early0] disabled
[    0.340719] printk: bootconsole [early0] disabled
[    0.362084] spi-nor spi0.0: gd25q128 (16384 Kbytes)
[    0.367176] 7 fixed-partitions partitions found on MTD device spi0.0
[    0.373757] Creating 7 MTD partitions on "spi0.0":
[    0.378721] 0x000000000000-0x000000020000 : "u-boot"
[    0.384734] 0x000000020000-0x000000030000 : "partition-table"
[    0.391545] 0x000000030000-0x000000040000 : "info"
[    0.397322] 0x000000040000-0x000000dc0000 : "firmware"
[    0.407496] 2 elf-loader-fw partitions found on MTD device firmware
[    0.414015] Creating 2 MTD partitions on "firmware":
[    0.419150] 0x000000000000-0x000000216048 : "kernel"
[    0.425137] 0x000000216048-0x000000d80000 : "rootfs"
[    0.431099] mtd: device 5 (rootfs) set to be root filesystem
[    0.438679] 1 squashfs-split partitions found on MTD device rootfs
[    0.445119] 0x000000550000-0x000000d80000 : "rootfs_data"
[    0.451576] 0x000000dc0000-0x000000df0000 : "config"
[    0.457523] 0x000000f30000-0x000000ff0000 : "log"
[    0.463288] 0x000000ff0000-0x000001000000 : "art"
[    0.470811] libphy: Fixed MDIO Bus: probed
[    2.580746] random: fast init done
[    6.767541] ag71xx: max retries for SGMII fixup exceeded
[    7.461141] libphy: ag71xx_mdio: probed
[    7.467124] ag71xx 19000000.eth: connected to PHY at mdio.0:04 [uid=004dd074, driver=Atheros 8031 ethernet]
[    7.477776] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    7.484529] i2c /dev entries driver
[    7.490078] NET: Registered protocol family 10
[    7.499960] Segment Routing with IPv6
[    7.503903] NET: Registered protocol family 17
[    7.508555] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    7.521955] 8021q: 802.1Q VLAN Support v1.8
[    7.527113] PCI host bridge /ahb/pcie-controller@18250000 ranges:
[    7.533475]  MEM 0x0000000012000000..0x0000000013ffffff
[    7.538874]   IO 0x0000000000000000..0x0000000000000000
[    7.544439] PCI host bridge to bus 0000:00
[    7.548682] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    7.555819] pci_bus 0000:00: root bus resource [io  0x0000]
[    7.561580] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    7.568585] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    7.576805] pci 0000:00:00.0: [168c:0056] type 00 class 0x028000
[    7.583064] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    7.590191] pci 0000:00:00.0: PME# supported from D0 D3hot
[    7.596772] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    7.603648] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    7.612096] hctosys: unable to open rtc device (rtc0)
[    7.622292] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    7.636538] Freeing unused kernel memory: 1236K
[    7.641247] This architecture does not have kernel memory protection.
[    7.647895] Run /sbin/init as init process
[    8.262168] init: Console is alive
[    8.265895] init: - watchdog -
[    9.348605] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    9.504288] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    9.522454] init: - preinit -
[   10.365239] random: jshn: uninitialized urandom read (4 bytes read)
[   10.476240] random: jshn: uninitialized urandom read (4 bytes read)
[   10.508434] random: jshn: uninitialized urandom read (4 bytes read)
[   10.667384] eth0: link up (1000Mbps/Full duplex)
[   10.678076] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   14.911105] jffs2: notice: (543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 49 of xdatum (0 unchecked, 37 orphan) and 67 of xref (11 dead, 38 orphan) found.
[   14.929245] mount_root: switching to jffs2 overlay
[   14.937168] overlayfs: upper fs does not support tmpfile.
[   14.947754] urandom-seed: Seeding with /etc/urandom.seed
[   15.100015] eth0: link down
[   15.114808] procd: - early -
[   15.117880] procd: - watchdog -
[   15.743573] procd: - watchdog -
[   15.829827] procd: - ubus -
[   15.921182] urandom_read: 5 callbacks suppressed
[   15.921189] random: ubusd: uninitialized urandom read (4 bytes read)
[   15.999952] random: ubusd: uninitialized urandom read (4 bytes read)
[   16.009784] procd: - init -
Please press Enter to activate this console.
[   16.811336] kmodloader: loading kernel modules from /etc/modules.d/*
[   17.004707] Loading modules backported from Linux version v5.10.34-0-g0aa66717f684
[   17.012588] Backport generated by backports.git v5.10.34-1-0-g7b5533e1
[   17.081639] xt_time: kernel timezone is -0000
[   17.114472] urngd: v1.0.2 started.
[   17.233269] PPP generic driver version 2.4.2
[   17.251604] NET: Registered protocol family 24
[   17.336503] ath10k 5.10 driver, optimized for CT firmware, probing pci device: 0x56.
[   17.361766] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[   17.368549] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   17.384747] random: crng init done
[   19.935893] ath10k_pci 0000:00:00.0: qca9888 hw2.0 target 0x01000000 chip_id 0x00000000 sub 0000:0000
[   19.945455] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   19.965545] ath10k_pci 0000:00:00.0: firmware ver 10.4b-ct-9888-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 59e741e7
[   20.302038] ath10k_pci 0000:00:00.0: board_file api 2 bmi_id 0:24 crc32 f228337a
[   22.063218] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   22.070994] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[   22.120910] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   22.132216] ath10k_pci 0000:00:00.0: wmi print 'free: 114572 iram: 12644 sram: 29508'
[   22.368479] ath10k_pci 0000:00:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   22.569025] ieee80211 phy1: Atheros AR9561 Rev:0 mem=0xb8100000, irq=2
[   22.645723] kmodloader: done loading kernel modules from /etc/modules.d/*
[   31.933821] br-lan: port 1(eth0) entered blocking state
[   31.939220] br-lan: port 1(eth0) entered disabled state
[   31.944959] device eth0 entered promiscuous mode
[   35.062261] eth0: link up (1000Mbps/Full duplex)
[   35.067070] br-lan: port 1(eth0) entered blocking state
[   35.072506] br-lan: port 1(eth0) entered forwarding state
[   35.170910] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   35.268172] br-lan: port 2(wlan1) entered blocking state
[   35.273744] br-lan: port 2(wlan1) entered disabled state
[   35.279528] device wlan1 entered promiscuous mode
[   35.284542] br-lan: port 2(wlan1) entered blocking state
[   35.290026] br-lan: port 2(wlan1) entered forwarding state
[   35.429216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   37.629918] ath10k_pci 0000:00:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   37.637723] ath10k_pci 0000:00:00.0: msdu-desc: 2500  skid: 32
[   37.687850] ath10k_pci 0000:00:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   37.699187] ath10k_pci 0000:00:00.0: wmi print 'free: 114572 iram: 12644 sram: 29508'
[   38.013436] ath10k_pci 0000:00:00.0: rts threshold -1
[   38.019246] ath10k_pci 0000:00:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[   38.054487] br-lan: port 3(wlan0) entered blocking state
[   38.060036] br-lan: port 3(wlan0) entered disabled state
[   38.066069] device wlan0 entered promiscuous mode
[   38.609966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   38.616785] br-lan: port 3(wlan0) entered blocking state
[   38.622325] br-lan: port 3(wlan0) entered forwarding state
[   38.628427] ath10k_pci 0000:00:00.0: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000

I activate through serial the wifi and insert coutry IT. No 5ghz SSID found.
attached wireless info from ubot

wireless.radio0=wifi-device
wireless.radio0.type='mac80211'
wireless.radio0.channel='36'
wireless.radio0.hwmode='11a'
wireless.radio0.path='pci0000:00/0000:00:00.0'
wireless.radio0.htmode='VHT80'
wireless.radio0.disabled='0'
wireless.default_radio0=wifi-iface
wireless.default_radio0.device='radio0'
wireless.default_radio0.network='lan'
wireless.default_radio0.mode='ap'
wireless.default_radio0.ssid='OpenWrt'
wireless.default_radio0.encryption='none'
wireless.radio1=wifi-device
wireless.radio1.type='mac80211'
wireless.radio1.channel='11'
wireless.radio1.hwmode='11g'
wireless.radio1.path='platform/ahb/18100000.wmac'
wireless.radio1.htmode='HT20'
wireless.radio1.disabled='0'
wireless.default_radio1=wifi-iface
wireless.default_radio1.device='radio1'
wireless.default_radio1.network='lan'
wireless.default_radio1.mode='ap'
wireless.default_radio1.ssid='OpenWrt'
wireless.default_radio1.encryption='none'
root@OpenWrt:/#

At this stage I would like to access the EAP via 192.xxx.yyy.zzz and install firmware, it is correct? I dont know next step.
A question (hoping not stupid), is there a way to restore original firmware ?
thanks to all community for your help

Access how?

Putty or browser?

See https://openwrt.org/toh/tp-link/eap225#tp-link_eap-225_outdoor

I have tried to access through web browser.
I found difficult to restore original firmware from the link above.

If you installed a snapshot there is no web interface. In that case upgrade to 21.02. ssh to 192.168.1.1 should work in any case though. The boot log shows eth0 is up, presumably connected to your PC. Does ping 192.168.1.1 from the Windows Command Prompt return any results?

If you didn't make a backup, it is somewhat complicated to generate a restore to stock image, and it requires running Linux on a PC.

I have decided after spending several hours of my free time (and of the community) to give up and to not continue in finding a solution because I don’t think that at this stage is worth.
Better for me to buy a new one aep225 antenna for my garden maybe used.
Thanks openwrt I will store all my knowledge acquired and Tools for future plans.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.